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Amendments to the claims 

Please amend the claims of the instant application as follows: 

1. (Currently amended) A method for establishing a connection from a user terminal to a 
network through a network access server, the method comprising the steps of: 

receiving a request from the user terminal to access the network with use of the network 
access server; and 

providing limited network access to the user terminal through the network access server, 
without the user terminal having provided any authentication of an identitv thereof to the network 
access server, and without the user terminal having directly provided any billing or payment 
information to the network access server, wherein providing said limited network access comprises 
providing network connectivity through said network access server between said user terminal and 
one or more predetermined enterprise-authenticated hosts and not providing network connectivity 
through said network access server between said user terminal and network sites other than said one 
or more predetermined enterprise-authenticated hosts^ 

wherein said network access server is operated by a service provider, wherein said service provider 
has a pre-existing relationship vnth each of one or more known enterprises, wherein said one or more 
enterprise-authenticated hosts consists of one or more VPN gateways associated with each of said 
one or more known enterprises, and wherein each of said pre-existing relationships comprises an 
agreement that said limited network access provided to said user terminal incurs a charge billed by 
said service provider to a corresponding one of said one or more knovm enterprises . 

2. (Original) The method of claim 1 wherein the user terminal comprises a wireless device 
and the network access server comprises a wireless LAN hotspot server. 

3. (Original) The method of claim 2 wherein the wireless device and the wireless LAN 
hotspot server communicate with use of an IEEE 802.1 1 standard protocol. 
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4. (Original) The method of claim 1 wherein said request from the user terminal comprises 
an identification of a given enterprise, and wherein said one or more enterprise-authenticated hosts 
consists of one or more VPN gateways associated with said given enterprise. 

5. (Original) The method of claim 4 wherein said user terminal has been pre-configured to 
automatically provide said identification of the given enterprise. 

6. (Original) The method of claim 4 wherein said request from the user terminal further 
comprises a fixed password, said fixed password uniquely associated with said given enterprise. 

7. (Original) The method of claim 6 wherein said user terminal has been pre-configured to 
automatically provide said identification of the given enterprise and said fixed password. 

8-11. Canceled. 

12. (Original) The method of claim 1 wherein said step of providing said limited network 
access comprises the steps of: 

comparing a first IP address pair to a set of previously stored IP address pairs, the first IP 
address pair comprising an IP address of said user terminal and an IP address of an intended 
destination to which access has been requested by said user terminal, and each IP address pair in the 
set of previously stored IP address pairs comprising the IP address of a user terminal connected to 
said network access server and an IP address of one of said one or more enterprise-authenticated 
hosts; and 

providing network connectivity between said user terminal and said intended destination if 
and only if said first IP address pair matches one of said IP address pairs in said set of previously 
stored IP address pairs. 

13. (Currently amended) A network access server for establishing a connection from a user 

terminal to a network, the network access server comprising: 
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means for receiving a request from the user terminal to access the network with use of the 
network access server; and 

means for providing limited network access to the user terminal through the network access 
server, without the user terminal having provided anv authentication of an identity thereof to the 
network access server, and without the user terminal having directly provided any billing or payment 
information to the network access server, wherein providing said limited network access comprises 
providing network connectivity through said network access server between said user terminal and 
one or more predetermined enterprise-authenticated hosts and not providing network connectivity 
through said network access server between said user terminal and network sites other than said one 
or more predetermined enterprise-authenticated hosts^ 

wherein said network access server is operated by a service provider, wherein said service provider 
has a pre-existing relationship with each of one or more known enterprises, wherein said one or more 
enterprise-authenticated hosts consists of one or more VPN gateways associated with each of said 
one or more known enterprises, and wherein each of said pre-existing relationships comprises an 
agreement that said limited network access provided to said user terminal incurs a charge billed by 
said service provider to a corresponding one of said one or more known enterprises . 

14. (Original) The network access server of claim 1 3 wherein the user terminal comprises a 
wireless device and the network access server comprises a wireless LAN hotspot server. 

15. (Original) The network access server of claim 14 wherein the wireless device and the 
wireless LAN hotspot server communicate with use of an IEEE 802.1 1 standard protocol. 

16. (Original) The network access server of claim 13 wherein said request from the user 
terminal comprises an identification of a given enterprise, and wherein said one or more enterprise- 
authenticated hosts consists of one or more VPN gateways associated with said given enterprise. 

17. (Original) The network access server of claim 16 wherein said user terminal has been 

pre-configured to automatically provide said identification of the given enterprise, 
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18. (Original) The network access server of claim 16 wherein said request from the user 
terminal further comprises a fixed password, said fixed password uniquely associated with said 
given enterprise. 

19. (Original) The network access server of claim 18 wherein said user terminal has been 
pre-configured to automatically provide said identification of the given enterprise and said fixed 
password. 

20-23. Canceled. 

24. (Original) The network access server of claim 13 wherein said step of providing said 
limited network access comprises the steps of: 

comparing a first IP address pair to a set of previously stored IP address pairs, the first IP 
address pair comprising an IP address of said user terminal and an IP address of an intended 
destination to which access has been requested by said user terminal, and each IP address pair in the 
set of previously stored IP address pairs comprising the IP address of a user terminal connected to 
said network access server and an IP address of one of said one or more enterprise-authenticated 
hosts; and 

providing network connectivity between said user terminal and said intended destination if 
and only if said first IP address pair matches one of said IP address pairs in said set of previously 
stored IP address pairs. 
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